67c7cffe7c07e21d7ca8100d81778a8e0ea073a6e947a6781687f498ae740648

Analysis

max time kernel
188s
max time network
200s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 12:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

r128gain-0.9.7-2/r128gain-tools/avcodec-54.dll
Size

2.8MB
MD5

1fa7fe1bc82c393d6c753b87908b951f
SHA1

394e224b2a77759603145398216bfff4f72dff55
SHA256

46c74eb8845547313f6cd08bd7714dcf68a517c9607a32d203a6f99f3253e770
SHA512

84968fec0853b2d54f5df4cb6b56ebab736be9b36a431ada46784ac0510660f6f01ba93af906610d6d97e151e2c61178ba53243d9af5aed73336f44fede4034a
SSDEEP

49152:+9ElWfImrFUyDEME/dPO9/y4DoGaCWOXeq4pzlZoVPRzfMnEGwrc:+9I8ImRU7MqdPO9/y4DoGaCNXeq4bZo9

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
956	4996	WerFault.exe	89

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 740 wrote to memory of 4996	740	rundll32.exe	89
PID 740 wrote to memory of 4996	740	rundll32.exe	89
PID 740 wrote to memory of 4996	740	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avcodec-54.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:740
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\r128gain-0.9.7-2\r128gain-tools\avcodec-54.dll,#1
  2⤵
  PID:4996
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 604
    3⤵
    - Program crash
    PID:956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4996 -ip 4996
1⤵
PID:4952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4996-1-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-3-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-4-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-5-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-2-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-6-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-7-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-8-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-9-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-10-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-11-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-13-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-14-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-15-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-16-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-17-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-18-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-19-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-21-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-20-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-24-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-25-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-26-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-28-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-29-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-23-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-31-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-30-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-33-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-35-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-37-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-39-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-40-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-41-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-42-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-43-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-38-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-34-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-45-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-47-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-48-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-49-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-46-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-50-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-51-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-52-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-54-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-55-0x000000006A0C0000-0x000000006A569000-memory.dmp

Filesize
4.7MB

Download
memory/4996-57-0x0000000068B80000-0x0000000068BAC000-memory.dmp

Filesize
176KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads